Collaborate Disseminate
NuGet packages are under attack! A new malware campaign exploits hidden code execution techniques to inject malware into… Continue reading NuGet Packages Exploited to Target Developers with Malware
Software developers have been targeted in a new attack via malicious packages in the NuGet repository.
The post Malicious NuGet Packages Used to Target .NET Developers appeared first on SecurityWeek.
Continue reading Malicious NuGet Packages Used to Target .NET Developers
Microsoft has officially announced changes to the NuGet Gallery. The NuGet V2 protocol makes use of a query mechanism called OData. Microsoft is planning to deprecate certain OData queries, which began with a limited test schedule in November, bef… Continue reading Nexus Repository & Microsoft NuGet Gallery: OData Changes for NuGet V2
We are excited to announce the official release of Nexus Repository 3.25. Delivering on much anticipation from the Nexus community, this release completes full support for NuGet V3 repositories, including new NuGet V3 Group repositories, and gives… Continue reading New in Nexus Repository 3.25: How Do I Switch to NuGet V3?
This is an excerpt from Out of the Wild: A Beginner’s Guide to Package and Dependency Management, a Sonatype Guide. This is the first of three installments.
The post What is a Package Dependency Manager? appeared first on Security Boulevard.
Continue reading What is a Package Dependency Manager?
Microsoft’s March Patch Tuesday updates include 64 fixes, 17 of which are rated critical. Continue reading Microsoft Patches Two Win32k Bugs Under Active Attack
I need to scan a number of website’s packages.json and see what Nuget updates are available, and to determine if any security vulnerability was patched by that version.
I understand that security information may not be immed… Continue reading What are the correct Nuget commands to see if newer packages (with security fixes) are available?
Our team works with sensitive financial applications and we want to be sure we are not introducing dangerous code into our projects. But we want to be able to use packages from Nuget.
What due diligence steps should be foll… Continue reading What steps should a developer take to ensure that a nuget package is not dangerous?